Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Paul
At 01:41 PM 4/30/2012 -0400, Eric Bégin wrote: Paul, Have you consider having your report generating a list of barcodes and using this list in the Batch Item modification tool to change the accesiondate ? Eric, Merci d'avoir pris le temps de répondre... Yes we did. And found it somewhat c

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Liz Rea
This is a pretty brilliant idea, imo. Perfect use for the tool. Liz Real...@nekls.org On Apr 30, 2012, at 12:41 PM, Eric Bégin wrote: Paul, Have you consider having your report generating a list of barcodes and using this list in the Batch Item modificati

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Eric Bégin
Paul, Have you consider having your report generating a list of barcodes and using this list in the Batch Item modification tool to change the accesiondate ? Regards, Eric Bégin www.inLibro.com On 2012-04-30 09:13, Paul wrote: Good morning all: I have no problem with the philosophy of the

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Chris Nighswonger
On Mon, Apr 30, 2012 at 12:51 PM, Paul wrote: > At 05:44 PM 4/30/2012 +0200, Fischer, Katrin wrote: > >> I really don’t like the idea. I think if you want someone to make >> changes to the database, you should give them a proper tool and training to >> do that (outside of Koha). >> > > Respectf

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Paul
At 05:44 PM 4/30/2012 +0200, Fischer, Katrin wrote: I really don’t like the idea. I think if you want someone to make changes to the database, you should give them a proper tool and training to do that (outside of Koha). Respectfully, we might be talking apples and oranges. *All* staff and

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Paul
At 11:21 AM 4/30/2012 -0400, Jared Camins-Esakov wrote: Paul, On Mon, Apr 30, 2012 at 11:17 AM, Paul Poulain wrote: Question to all = could it be a good idea to let superlibrarians execute dangerous SQLs like the one forbidden by the test ? Otherwise asked: could we add a unless permission eq

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Chris Cormack
On May 1, 2012 4:00 AM, "Chris Nighswonger" wrote: > > On Mon, Apr 30, 2012 at 11:44 AM, Fischer, Katrin < katrin.fisc...@bsz-bw.de> wrote: >> >> Hi Paul, >> >> >> >> I really don’t like the idea. I think if you want someone to make changes to the database, you should give them a proper tool and t

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Jared Camins-Esakov
Liz, 2012/4/30 Liz Rea > Yes! I have a proposal for possible changes to the web installer at > http://wiki.koha-community.org/wiki/Rfc_3.10_webinstaller_improvements - > which includes the possibility to remove the ability of the db user to log > in at all and force creation of a new admin super

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Paul Poulain
Le 30/04/2012 17:59, Chris Nighswonger a écrit : > On Mon, Apr 30, 2012 at 11:44 AM, Fischer, Katrin > mailto:katrin.fisc...@bsz-bw.de>> wrote: > I wonder if there is not even a better way to handle the installer so > that the db user does not have to log into the interface at all? YES, there is

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Liz Rea
Yes! I have a proposal for possible changes to the web installer at http://wiki.koha-community.org/wiki/Rfc_3.10_webinstaller_improvements - which includes the possibility to remove the ability of the db user to log in at all and force creation of a new admin superlibrarian at install time.l...@nek

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Chris Nighswonger
On Mon, Apr 30, 2012 at 11:44 AM, Fischer, Katrin wrote: > Hi Paul, > > ** ** > > I really don’t like the idea. I think if you want someone to make changes > to the database, you should give them a proper tool and training to do that > (outside of Koha). The interface for statistics is very li

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Ian Walls
I agree with Katrin; this is a very risky proposition and probably shouldn't be added to the Koha codebase. Not only is doing this securely hard, but it also makes the job of your system support specialist much harder (speaking as a former professional Koha support guy here). If you're in a situa

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Fischer, Katrin
Hi Paul, I really don’t like the idea. I think if you want someone to make changes to the database, you should give them a proper tool and training to do that (outside of Koha). The interface for statistics is very limited and does not give feedback when your SQL statements have errors or pr

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Jared Camins-Esakov
Paul, On Mon, Apr 30, 2012 at 11:17 AM, Paul Poulain wrote: > Question to all = could it be a good idea to let superlibrarians execute > dangerous SQLs like the one forbidden by the test ? > Otherwise asked: could we add a > unless permission eq 'superlibrarian' > condition ? > > ( ie: "with gre

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Paul Poulain
Le 30/04/2012 16:21, Paul a écrit : > Chris, > > Many thanks, I'll see what I can do (after hours tonight.) Just > wondering if a perl expert could suggest the code to add a "condition" to > if ($sql =~ /;?\W?(UPDATE|DELETE|DROP|INSERT|SHOW|CREATE)\W/i) { > push @errors, {sqlerr => $1}

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Paul
At 09:28 AM 4/30/2012 -0400, Chris Nighswonger wrote: On Mon, Apr 30, 2012 at 9:27 AM, Chris Nighswonger <cnighswon...@foundations.edu> wrote: On Mon, Apr 30, 2012 at 9:13 AM, Paul <pau...@aandc.org> wrote: Can anyone point me rapid

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Chris Nighswonger
On Mon, Apr 30, 2012 at 9:27 AM, Chris Nighswonger < cnighswon...@foundations.edu> wrote: > On Mon, Apr 30, 2012 at 9:13 AM, Paul wrote: > >> >> Can anyone point me rapidly to the portion of script that I should have a >> look at? >> >> > Fair warning: Mung up at your own risk > > > http://gi

Re: [Koha-devel] SQL reports [error]

2012-04-30 Thread Chris Nighswonger
On Mon, Apr 30, 2012 at 9:13 AM, Paul wrote: > > Can anyone point me rapidly to the portion of script that I should have a > look at? > > Fair warning: Mung up at your own risk http://git.koha-community.org/gitweb/?p=koha.git;a=blob;f=reports/guided_reports.pl;h=cb85f39420d9aafc0c3e158ed7c6d

[Koha-devel] SQL reports [error]

2012-04-30 Thread Paul
Good morning all: I have no problem with the philosophy of the following (bright yellow) pop-up error message: "The following error was encountered: This report contains the SQL keyword UPDATE. Use of this keyword is not allowed in Koha reports due to security and data integrity risks." and wo